Nothing but what I already sent the mailing list. I think that the problem might be 1 if 2: 1. the directive: log_fifo_size (999999); 2. a problem in the way that syslog-ng writes to files. I will try to decrease the log_fifo_size directive and see what happens. TIA Paolo --- Nate Campi <nate@campin.net> wrote:
On Mon, Dec 26, 2005 at 03:14:21AM -0800, Paolo Supino wrote:
Here is an update on the interval in writing to the log file: the output of ls -l on the file: -rw-r--r-- 1 root root 6234 Dec 26 08:03 switch-01.log and the last messsege coming in on the NIC (captured by tcpdump): 12:56:57.564348 IP switch-01.1024 > syslog.hot.net.il.syslog: UDP, length 75 As you can see the time interval is almost 5 hours... :-(
Wow, I can see how you'd be frustrated. Do you have any filters that might be preventing particular messages from being written to the file? Put in a catchall destination to see if it differs from the logging to your filtered files.
http://www.campin.net/syslog-ng/faq.html#logall
Hope this helps. -- Nate
"Java is, in many ways, C++--." - Michael Feldman.
_______________________________________________ syslog-ng maillist - syslog-ng@lists.balabit.hu https://lists.balabit.hu/mailman/listinfo/syslog-ng Frequently asked questions at http://www.campin.net/syslog-ng/faq.html
__________________________________ Yahoo! for Good - Make a difference this year. http://brand.yahoo.com/cybergivingweek2005/